
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json)
Hash identifier: Tq4MEDr+a98YYK4a1UPbMlz8i2X+O0u3hpBmH7KTrAY=
Subject key identifier: 22:99:49:72:E3:4B:F2:88:C9:1B:79:BD:58:1A:30:CE:F7:8C:88:62
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 03AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
Manifest number: 0345
Signing time: Sun 01 Mar 2026 02:19:22 +0000
Manifest this update: Sun 01 Mar 2026 02:19:22 +0000
Manifest next update: Sun 08 Mar 2026 02:19:22 +0000
Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: KPb+W0aCIiQNmCFc0AsgYMTbdrke4mu961L0r6Jbsns=)
2: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=)
3: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=)
4: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=)
5: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=)
6: 20978DD270E411F08F40242AC4F9AE02.roa (hash: R3SuPMnexdh7gybsYJg7tLaSKVa8pxRhjB4eo3WkAzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Mar 1 02:19:22 2026 GMT
Not After : Mar 8 02:19:22 2026 GMT
Subject: CN=69a3a22a-c305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:10:3b:e1:e5:b3:29:ce:38:5c:07:4d:b7:
99:87:3c:c1:8f:53:e8:38:7e:e4:99:2e:26:09:b2:
f4:0b:d5:a7:44:3f:d6:97:50:37:74:42:78:77:63:
7c:56:e7:29:32:e5:e4:39:e0:4c:5c:85:50:9b:60:
66:c0:e5:c5:eb:0e:ff:02:7b:42:d7:a8:fa:a0:35:
f0:a5:49:8a:fd:b1:38:0d:cf:1e:7f:1f:96:13:ee:
0b:aa:90:55:42:68:d7:fd:f5:46:c8:38:63:88:f4:
63:1c:0d:b0:9a:e8:32:5e:d2:6c:d6:6d:f4:41:19:
88:95:a2:43:2e:82:41:66:c1:31:6b:ab:e3:20:cc:
07:53:b5:ee:bf:78:34:5b:2d:2c:3e:8b:c3:0d:29:
d8:c0:58:a2:1c:6d:ff:6f:48:05:79:d6:95:49:d2:
e5:ed:36:a7:54:2f:a2:56:6d:bb:3f:db:b8:30:d5:
ae:c2:d3:d3:0d:4e:aa:c8:d1:a4:a4:7f:93:0e:39:
3b:ae:4c:0d:30:5e:de:71:ea:d3:d5:1d:1b:85:5e:
ef:5c:36:bf:25:bf:df:ee:0e:e4:3d:da:61:85:24:
c0:71:0e:0c:c0:f9:ab:6a:13:32:ff:8d:45:25:c6:
8c:25:8e:dc:90:e1:c7:4e:80:73:4d:14:61:f2:48:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:99:49:72:E3:4B:F2:88:C9:1B:79:BD:58:1A:30:CE:F7:8C:88:62
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:2c:6e:2c:b6:ea:5c:f3:87:e1:e5:2c:c5:83:0c:31:aa:b4:
f0:98:71:12:2b:63:42:d3:12:d8:50:d3:40:d7:a4:c6:5d:f0:
e6:9c:2f:f2:91:9d:07:38:c7:08:40:87:a4:d2:66:f9:cf:43:
68:70:73:32:e2:56:39:f4:18:34:5e:5a:84:c4:87:17:aa:d6:
e4:f9:77:c2:dc:5c:dc:c1:fd:69:92:bf:d3:07:47:e8:f0:89:
e2:ba:ca:4e:cd:4c:2a:97:53:ab:7f:b3:dc:bf:9e:d9:f1:b7:
38:d6:c6:7a:77:24:32:43:cb:42:c2:51:03:15:85:e0:10:db:
0b:e8:60:02:ce:45:1c:7c:f4:a2:f2:26:2a:f9:cf:1f:cf:32:
2a:13:f4:d4:a2:85:88:13:5c:30:2e:fb:da:c3:c4:5f:81:20:
46:80:90:54:5e:4e:89:1e:79:df:bc:bf:8c:b8:5e:be:03:40:
ef:1d:fa:67:a2:eb:af:9f:65:da:9d:79:d0:2e:13:fa:e3:56:
2f:31:2f:aa:04:88:f8:3f:7e:a9:56:6c:42:94:0d:a8:c9:20:
61:6e:6b:63:35:c2:6d:f8:7e:d7:60:6b:38:3e:7f:00:1c:f6:
65:53:2d:d9:9c:f9:a0:a4:21:b1:60:27:e0:c3:fe:a2:4d:30:
cb:11:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:28 2026 by rpki-client